EventSentry

From My Notepad
Jump to: navigation, search

Installation

Download from the following site: mirror

Configuration

The configuration below will notify you of severe Exchange events:

Warning and Errors:
Log: Application, Security, System
Event Severity: Information, Warning, Error, Audit Failure
Event ID: 12168,1216,1217,9690,1000,9523,9539,9690,101,102,103

If you want to monitor DFS Replication, make the following changes:

Warnings and Errors:
Custom Event Logs: Add the DFS Replication log
Event ID: Add the following events as desired:
     4004 - DFSR stopped replication - overlapped I/O operation is in progress